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Abstract 

We give new combinatorial proofs of known almost-periodicity results for sumsets of sets 
with small doubling in the spirit of Croot and Sisask [CS10], whose almost-periodicity lemma 
has had far-reaching implications in additive combinatorics. We provide an alternative (and 
L p -norm free) point of view, which allows for proofs to easily be converted to probabilistic 
algorithms that decide membership in almost-periodic sumsets of dense subsets of F!> 1 . 

As an application, we give a new algorithmic version of the quasipolynomial Bogolyubov-Ruzsa 
lemma recently proved by Sanders [SanlO]. Together with the results by the last two authors 
[TW11], this implies an algorithmic version of the quadratic Goldreich- Levin theorem in which 
the number of terms in the quadratic Fourier decomposition of a given function is quasipoly- 
nomial in the error parameter e, compared with an exponential dependence previously proved 
by the authors. It also improves the running time of the algorithm to have quasipolynomial 
dependence on e instead of an exponential one. 

We also show an application to the problem of finding large subspaces in sumsets of dense 
sets. Green showed in [Gre05a] that the sumset of a dense subset of F£ contains a large sub- 
space. Using Fourier analytic methods, Sanders [Sanlla] proved that such a subspace must have 
dimension O(an). We provide an alternative (and LP norm-free) proof of a comparable bound, 
which is analogous to a recent result of Croot, Laba and Sisask [CLS11] in the integers. 
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1 Introduction 

When Croot and Sisask introduced "A probabilistic technique for finding almost-periods of convo- 
lutions" in 2009 [CS10], it created quite a splash in the additive combinatorics community. Roughly- 
speaking, their main result says that if A C IF?? is a set whose sumset A + A = {a + a' : a, a' £ A} is 
small, then there exists a dense set T such that the convolution l^*!^-) of the indicator function 
of A with itself and its translate 1a * + t) are almost indistinguishable in the 1? norm (or 
higher L p norms) for all t € T. This set T may then be referred to as the set of "almost-periods" . 

Croot and Sisask's original proof used a simple sampling technique combined with tailbounds for a 
multinomial distribution, which Sanders replaced by the Marcinkiewicz-Zygmund inequality. Both 
made crucial use of L p norms, where in applications p is taken to be very large (a function of the 
density a of a set A C F?> under investigation, such as loga -1 ). 

Here we give a different proof of the Croot-Sisask lemma that proceeds entirely without recourse to 
L p norms, instead only relying on Chernoff-type tail estimates for sampling. It is our hope that this 
proof will appeal to a larger part of the theoretical computer science community than the currently 
existing ones, thereby increasing the likelihood of further novel applications of this lemma. 

In the present paper we illustrate the use of this new technique by new and simplified proofs of 
several known results as well as an algorithmic application. Let us describe these in more detail. 

Applications. In its original form, the Bogolyubov-Ruzsa lemma states that if A C FJj is a set of 
density a, then AA := A + A + A + A contains a subspace of codimension at most 2a -2 . One of 
the first applications Croot and Sisask gave of their new technique was a weak Bogolyubov-Ruzsa 
lemma, which asserted the existence of iterated sumsets of a dense set inside 4A It was quickly 
recognized by Sanders [SanlO] that the latter result could be boot-strapped, using a little Fourier 
analysis, to a quasipolynomial version of the Bogolyubov-Ruzsa lemma in which the codimension 
of the subspace that is found within AA is polylogarithmic in the density of the set A (so the 
size of this subspace is quasipolynomial in the density). This result has important implications 



for the bounds in Freiman's theorem which describes the structure of sets of integers with small 
sumsets [Ruz99], and the inverse theorem for the Gowers U 3 norm [GT08]. It was also a crucial 
ingredient in Sanders's groudbreaking upper bound of C(log log N) 5 N/ log N for the size of a subset 
of {1, ... , N} not containing any 3-term arithmetic progressions [Sanllb]. 

In Section 4.1 we give a straightforward proof of Sanders's quasipolynomial Bogolyubov-Ruzsa 
lemma, specifically adapted to the setting of FJj, which avoids the use of higher-order L p norms 
and instead relies exclusively on Chernoff-type tail bounds. 

Next we present an algorithmic application. The original motivation for this paper lies with work 
by the last two authors on quadratic decomposition theorems. The aim of such theorems is to 
decompose any bounded function / : FJ? — > C as a sum g + h, where g is quadratically uniform, 
in the sense that the Gowers U 3 norm \\g\\jj3 is small, and h is quadratically structured, in the 
sense that it is a bounded sum of quadratically structured objects. These types of decompositions 
constitute a higher-order analogue of classical Fourier decompositions, and had previously been 
obtained in an abstract and non-constructive way (either using a form of the Hahn-Banach theorem 
[GW12], or a so-called energy increment approach [Gre07]). 

In [TW11], the authors gave a probabilistic algorithm that, given any function / : FJf — >■ C, 
would with high probability compute, in time polynomial in n, a quadratic decomposition for that 
function with a specified U 3 error e. This essentially amounts to computing a "quadratic Fourier 
decomposition" for /, and was therefore termed a quadratic Goldreich- Levin theorem in analogy 
with the well-known linear case [GL89] . The quadratic Goldreich-Levin algorithm consisted of two 
parts: a deterministic part which is able to construct the quadratically structured part of / under 
the assumption that we have an algorithm which provides some quadratic phase functions that / 
correlates with (if there is no such phase function, we just set g = /). The algorithm for finding 
a quadratic phase function, which constitutes the second part of the overall algorithm, is basically 
an algorithmic version of the proof of the inverse theorem for the U 3 norm, which states that if a 
bounded function / has large U 3 norm, then it correlates with a quadratic phase. 

As stated above, the Bogolyubov-Ruzsa lemma is crucial in the proof of the inverse theorem, and 
it should not come as surprise that a new proof with a quantitative improvement has implications 
for the efficiency of the quadratic Goldreich-Levin algorithm outlined above. In Section 4.2 we tie 
the techniques developed in the earlier sections of the paper into the algorithm given in [TW11] to 
obtain an improvement in the running time (from exponential to quasipolynomial in the quadratic 
uniformity parameter e) as well as in the number of terms that are obtained in the final quadratic 
decomposition (with a similar improvement in the dependence on e). One of the main difficulties, 
encountered already in [TW11], is that the individual subroutines in the quadratic Goldreich-Levin 
algorithm, which correspond to algorithmic versions of theorems in additive combinatorics, are 
probabilistic in nature. Since they are applied in sequence, this means that the input for the next 
subroutine comes with a certain amount of noise, and it is therefore necessary to prove robust 
algorithmic versions of the theorems from additive combinatorics. This applies in particular to the 
quasipolynomial Bogolyubov-Ruzsa lemma, for which we give robust version in this paper. The 
detailed introduction of the key concepts in additive combinatorics and quadratic Fourier analysis 
is postponed to the start of Section 4. 

Our final application concerns the problem of finding large subspaces within sumsets of a dense 
set. Green [Gre05a] had shown that if A C F£ has density a, then A + A contains a subspace of 
dimension Q(a 2 n). Sanders proved in [Sanlla] using a Fourier-iteration lemma that this subspace 
must be of dimension at least Q(an), and remarked that a bound of comparable strength follows 
implicitly from the techniques of Croot, Laba and Sisask [CLS11], who addressed the more general 



2 



problem in the integers, asking for long arithmetic progressions in sumsets of dense sets. 

In Section 5 we provide a simplified proof of the Croot-Laba-Sisask bound, again avoiding Fourier 
analysis and using instead our sampling approach to Croot-Sisask almost-periodicity in F?>. It 
requires a more careful analysis of our sampling technique, which we shall give in detail in the 
appendix. We do not address the question in the integers, nor the non-abelian case, of which this 
is a toy version. 

Chernoff vs. LP norms. It is of course well known that LP bounds and Chernoff 's inequality are, 
in a certain sense, equivalent. Specifically, a random variable X obeys a Chernoff- type tail bound 
of the form 

F[\X\ > t\\X\\ 2 } < C exp{-fl{t 2 )) 
if and only if its LP norm satisfies 

< C^P\\X\\ 2 

for all p £ [2,oo), the latter representing a Khinchine-type inequality (from which Marcinkiewicz- 
Zygmund can be derived). For a proof of this statement we refer the reader to the excellent lecture 
notes by Sanders [Sanl2]. 

We therefore do not claim that our proof of Croot and Sisask's almost-periodicity results is radically 
new. However, we do think it writes itself rather naturally in the special case of FJj, and it lends itself 
more readily to applications in that setting. Moreover, these results can also be "algorithmified" 
in what is in our opinion a more natural way. 

Acknowledgements. The last two authors would like to thank Tom Sanders for numerous helpful 
remarks and discussions. The first two authors would like to thank Shachar Lovett for sharing with 
them his view of Sanders's proof of the quasipolynomial Bogolyubov-Ruzsa lemma (cf. [Lovl2]). 

2 Preliminaries 

In this section we fix our notation and collect some results that we shall use throughout the paper. 
Fundamental to our approach will be the following Chernoff-type tail bound for sampling [TV06] . 

Lemma 2.1 (Hoeffding bound for sampling) If is a random variable with |X| < 1 and ft 
is the empirical average obtained from t samples, then 

P[|E[X]-A| > 7] < 2exp(-2 7 2 t). 

Throughout the paper we shall make use of the discrete Fourier transform, which we define as 
follows. For / : F% -> C, let 

f(t)=E xe¥ nf( x )(-iy t 

for any t £ F2 = FJ> , where E^pn simply stands for the normalized sum 2~ n Ylxewq and x • t = 
Y17=i Xiti f° r a P a ^ r °f vec tors x = (x\, . . . , x n ), t = (t±, . . . , t n ). The inversion formula states that 

/(*) = E /(*)(-ir* 

tew™ 

for all iGFj, and Parseval's identity takes the form 

(f,g) = (f,d), 
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where the inner product is defined as (/,<?) = 1 & x &^f{x)g{x) in physical space, and {f,g) = 
SigFj /(^)ff(^) on frequency space, for any two functions /, g : FJ? — >■ C. 
Finally, the convolution of two such functions is defined by 

/ * g(x) = E yeV n f(y)g(x - y), 

and the fact that the Fourier transform diagonlizes the convolution operator is expressed via the 
idenity 

f7g(t) = f(t)g(t), 

which holds for all t G F?>. 

The set of large Fourier coefficients determines the value of a function to a significant extent, and 
for many arguments it is important to be able to estimate its size and determine its structure. For 
a function / : F T 2 l C, let 

Spec p (/) = {t€B?:|/(t)|>p||/||i}. (1) 

For a subset A C Fg we let 1a denote the indicator function of A and pa denote the function 
1a ■ (2 n /\A\) so that E^f^/m^)] = 1- In the special case where f = 1a for a subset i C Fj of 
density a, Parseval's identity tells us that |Spec p (lyi)| < p~ 2 • a -1 . A more precise result is known: 
Chang's theorem [Cha02] states that Spec p (lA) is in fact contained in a subspace of dimension at 
most Cp _2 logQ _1 . 

Theorem 2.2 (Chang's theorem) Let p G (0, 1] and A C F?>. Then there is a subspace V of ¥% 
such that Spec p (lyi) ^ V and 

d imW <8 l0g < 2 Y' A ". 

For an elegant recent proof of this result using entropy, see Impagliazzo et al. [IMR12]. 

Finally, for two real numbers a, (3 we write a ~ e (3 to denote \a — /3\ < e and if \a — /3\ > e we write 
a ?fc £ (3. All logarithms in this paper are taken to base 2. 

3 Sampling-based proofs of almost-periodicity results 

For comparison, we give the precise statement of the original result of Croot and Sisask (Proposition 
1.3 in [CS10]). Since it is valid for general groups G, it is written in multiplicative notation. 

Proposition 3.1 (Croot-Sisask Lemma , LP local version ) Let e > and let m > 1 be an 

integer. Let G be a group and let A, B C G be finite subsets such that \B • A\ < K\B\. Then there 
is a setX Ci of size \X\ > | A\/(2K) 50m / £ such that for each x G II" 1 , 

||1U * l B (yx) - t A * t B (.y)\\lZ < m&x{e m \AB\\B\ m , \\1 A * l B \\%}e m \B\ m . 

In the next section we prove our version of the Croot-Sisask lemma, given as Proposition 3.2 below. 
In Section 3.2 we give a modified version in which the resulting set of almost-periods, appearing 
as II -1 in Proposition 3.1 above, can in fact taken to be a subspace, which is what we need in 
applications. 
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3.1 Croot-Sisask almost-periodicity 



To state our result concisely, we define the following measure which will play a central role in what 
follows. Given subsets A, B C where A is finite, define the measure of additive containment 
PA^b : n -> [0, 1] by 

p A ^ B (y) := P \y + a € B] = liy + ^ B{ = p A * l B (y), (2) 

aeA \A\ 

for each y € F?>. Notice that pa^b(v) = 1 when y + A C B and pa^b(u) = when (y + ^4)ni? = 0. 

Proposition 3.2 (Almost-periodicity of sumsets ) If A C F?> satisfies \2A\ < K\A\, then for 
every integer t and set B C¥^ there exists a set X with the following properties. 

1. The set X is contained in an affine shift of A. 

2. The size of X is at least \A\/(2K t - 1 ). 

3. For all x £ X and for all subsets S C F£, 

F \pa-+b(v) ~2e Pa^b{v + x)]>l- S ^^ 1 • exp (-2e 2 t) . (3) 

y£b \D\ 

Our proof differs from the original proof of Croot and Sisask in that it disposes of L p -norms and 
tail bounds for a multinomial distribution (or the Marcinkiewicz-Zygmund inequality), and replaces 
them with sampling arguments relying on the Chernoff-Hoeffding bound. 

We sketch the proof before giving the technical details. To obtain X we replace pa-^b by an 
estimator function computed by taking a sequence of t independent random samples distributed 
uniformly over A. Denoting the sample sequence by a = (ai, . . . , a<), we estimate pa-^b{v) by the 
fraction of ai 6 a satisfying y + m £ B. Denote the estimator function corresponding to a by p a . 
Fixing y, the Chernoff-Hoeffding bound says that the probability that p a (y) differs from pa^b{u) 
by more than e, i.e., the probability of the event "pa^b(u) P&{y)" when a = (ai,...,a<) is 
distributed uniformly over A 1 , is at most exp (-ft(e 2 t)). 

The key observation in the construction of the set X is that there are many pairs of good estimator- 
sequences a = (ai, . . . , at), a = (ai, . . . , at) for which there exists a "special" element x 6 FJ? such 
that a = x + a, where x + a := (x + ai, . . . , x + at). Such x can be justly called "special" for the 
following reason. Call y "good" if both of the following conditions hold, 

Pa^b{v) ~ £ Pk{y) and Pa^b{v + x) « e p a {y + x). (4) 

Now if a = x + a, then we have 

Pk(y) = Pa(y + x + x) = p a+x {y + x) = p a {y + x), 

and combining this with (4) implies that for "good" y we have pa^b(v) ~2£ PA^b{v + x). Thus, 
to prove the proposition we only need to bound from below the number of "special" elements x, 
which is done based on the assumption that A has small doubling. We now give the formal proof. 

Proof of Proposition 3.2: To simplify notation let p(y) := pA^B^y), and for a sequence 
a = (ai, . . . , at) of length t, define the a.-estimator of p to be the function p a : Fg — > [0, 1] defined 
for y e F^ by 

- , v \{y + ai€B\i = l,...,t}\ 

pshn ■= t • 
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We say that a is an e-good estimator for y if p(y) ~ e p a (y). 

Fix y G Fr>. Our first step towards constructing X is to show that most sample-sequences from A 
are e-good for y, provided that t, the sample size, is large enough with respect to 1/e. Let Yj be 
the indicator random variable for the event u y + a« G B" when Oj is chosen uniformly at random 
from A. Then p a (y) = \ ^2\ = i Y% is the average of t i.i.d. indicator random variables each having 
mean p(y), so the Chernoff-Hoeffding bound (Lemma 2.1) implies that for each y G F?,', 

F Jp(y)^ £ p a (y)]<2exp(-2e 2 t). (5) 

Now we proceed to show that most a 6 ^4* are e-good estimators for most y. Let Z a be the random 
variable measuring the fraction of y £ A + B for which a is an e-good estimator, that is, 

Z a := P [p(y) « e p a (y)] . 
y€A+B 

Setting 5 = 2exp (— 2e 2 i), we conclude from (5) via linearity of expectation that 

E aeAt [Z a ] >1-S. 

Markov's inequality now shows that at least half of the sequences a G A 1 are e-good estimators for 
all but a (2<5)-fraction of y G ^4 + B, in which case we say that a is an (e, 25)-good estimator for p. 
Denote by G[e, 2(5] C A* the set of these sequences, 

G[e, 25] = |a G A* \ [p(y) « e p a (y)] > 1 - 2*| . 



To obtain X we partition G[e, 2(5] as follows. Define a mapping ip : A 1 \-> {0} x (2 A) 1 1 by shifting 
a sequence a = (ai, . . . , at) by its first element a±, 

93(a) = a + 01 := (ai + 01, ai + a 2 , . . . , a\ + a t ) (6) 



Then </? maps the set G[e, 2(5], which has size at least |A|*/2, into a set of size 1 2^4 1 * 1 < (K|A|)* _1 
so by the pigeonhole principle, there is a subset G[e, 2<5]b C G[e, 2<5] that is mapped to the same 
element b = (0, 62, • • • , h)- I n addition, this subset is pretty large, 

|G[£ ' 2flb| -2i^-W- 1= 2^ r ' (?) 
Finally, fix an arbitrary a = . . . ,a t ) G G[e, 2<5]b and set 

X = {ai + ai I (ai, . . . , a t ) G G[e, 2<5] b } • 



To complete our proof we show that X has the three properties listed in the statement of the 
lemma. 



1. By definition, IC01+A 

2. The mapping G[e, 2(5] b | — > X given by (01, . . . , a t ) >->■ a± + ai is invertible, because both ai 
and b are fixed. Hence |X| = |G[e, 2<5]b| and the size of X is bounded from below using (7). 



6 



3. Suppose x = ai + a±, where a\ is the first element of an (e, 2<5)-good estimator a = 
(oi, . . . ,a t ) G G[e,25]h- The key observation is that a + x = a. Indeed, the definition of 
G[e, 2£]b implies 99(a) = 99(a), so using (6) we have 

di + a,i = ai + Oj, i = l,...,t, 

which, rearranging, comes out to 

ai = x + di, i = 1, . . . , t. 
In other words, a + x = a as claimed. 

Recalling that a is an (e, 25)-good estimator, we know that for all but a 2<5-fraction of y G 
A + B, 

p(y) ~s (8) 

and (8) also holds for all y ^ A + B since in this case p a (y) = p{v) = 0- Hence we have that 
(8) holds for all but a {28\A + -fraction of y G S. 

Similarly, since a is an (e, 25)-good estimator, we have that 

p(y + x) ra £ Pa(y + x) (9) 

for all but a (25\A + B\/\x + 5|)-fraction of y G S 1 . Using a union bound and the fact that 
|5 + x\ = \S\, we find that for all but a (4S\A + B\/\S\) -fraction of y € S both (8) and (9) 
hold. For such y we conclude that p(y) «2e p(y + x ) using the triangle inequality and the fact 
that /5a (y) = p^+xiv + x) = p a (y + x). 

This completes the proof of the proposition. ■ 

By an inductive application of Proposition 3.2 one can prove its following iterated version. 

Corollary 3.3 (Almost-periodicity of sumsets, iterated) If A C F?> satisfies \2A\ < K\A\, 
then for every integer t and set B C¥^ there exists a set X with the following properties. 

1. The set X is contained in an affine shift of A. 

2. The size of X is at least \A\/{2K t - 1 ). 

3. For all x\, . . . , xe £ X and for all subsets 5 C F 2 , 

F \pA^ B {y) ~2et PA^ B {y + X! + . . . + x t )] > 1 - 81 ^*^ • exp {-2e 2 t) . (10) 
y&S |D| 

Proof: The proof is by induction on I. Proposition 3.2 establishes the case £ = 1. For the 
induction step, suppose that the lemma holds for some integer £ > 1 with a set X C F?>. We shall 
show that the same set X satisfies the above requirements for t + 1. 

Let 6 := 8(|A + 5|/|5|) -exp (— 2e 2 t). By the induction hypothesis, for at least a (1 — &5)-fraction of 
y G S, it is true that pa^b{v) ~2si PA->b{v + x\ + . . . + xg). The case i = 1 implies that for at least 
a (1 — <5)-fraction of y G S, it is true that pA-^B^y + x\ + . . . + xg) «2e PA^b(u + x± + . . . + a^+i). 
Thus by a union bound we have that for at least a (1 — (£ + l)5)-fraction of y G S* we have both 
PA^b(v) ~2ei PA^b(v + xi + ... + x e ) and pa^b{v + x 1 + ... + x e ) « 2e pa^b(v + X1 + ... + x e+1 ). 
The proof is completed by noting that by the triangle inequality, for each such y, we also have 
PA^b(v) ~2s(£+i) Pa^b{v + X1 + ... + x e+ i). M 
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3.2 Almost-periodicity over a subspace 



For applications one would like a version of Proposition 3.2 in which the set X of periods is in 
fact a subspace. It was observed by Sanders [SanlO] that one can use iterated almost-periodicity 
statements such as Corollary 3.3, combined with some Fourier analysis, to obtain such a subspace. 
In this section, we use Sanders's argument to deduce the following statement from Corollary 3.3. 



Corollary 3.4 (Almost-periodicity of sumsets over a subspace) If A C F 2 is a subset of 
density a, then for every integer t and set 8 C there exists a subspace V of codimension 
codim(y) < 321og(2/a') with the following property. 

For every v G V, for all subsets S C F 2 and for every e, rj > and integer i, 

P \pa-+b{v) ~ £ ' PA-*b(v + v)]>l- 16- |A .~t. g| • exp (-2e 2 t) , (11) 
y€b 1] I (3 1 

where e' = 4e£ + 2n + 2~ e ^/\B\J\A\. 



As we shall see in Sections 4 and 5, the proof of the quasipolynomial Bogolyubov-Ruzsa lemma 
(Theorem 4.8) follows easily from the above lemma, and Green's theorem on the existence of 
subspaces in sumsets of dense sets (Theorem 5.2) follows easily from a refinement of the above 
corollary (which we will give as Corollary 5.3 below). Note that for the proof of Corollary 3.4 we 
need the stronger assumption that A has density at least a in F 2 , instead of the doubling hypothesis 
\2A\ < K\A\. 

The idea of the proof of Corollary 3.4 is the following. Let X be the subset guaranteed by Corollary 
3.3 for K = l/cc, and define the subspace V a.sV = Spec 1/ / 2 (^)" L (see Section 2 for the definition of 
SpeCp). The intuition is that if X were a subspace then Spec 1 / 2 (A") = V^, and hence V = X. Thus 

V serves as an "approximate subspace" for X. Since A is dense in W%, by Corollary 3.3 we also 
have that X is dense in F 2 and hence Chang's theorem (Theorem 2.2) implies that the subspace 

V is also dense in F 2 (this is the only place where we need the stronger assumption on the density 
of A). 

In order to show that (11) holds we first show, using Corollary 3.3, a simple averaging argument 
and the triangle inequality, that for most y G S, 

E v [PA->B(y + Xl + ••• +Xi)\ ~2ee+r) PA^b{v) ■ (12) 

x!,...,xeex 

Similarly, for all v £ V and for most y £ S, 

E , [pa^b{v + v + xi + . . . + xi)} ~2ee+r) Pa^b{v + v) . (13) 
xi,...,x e ex 

We then use Fourier analysis, following Sanders's argument closely, to show that for all y G F 2 , 

E [pA^BiV + X! + . . . + X £ )} t/Tgy, 7j E \pA-+B(V + V + X! + . . . + Xl)] , (14) 

where v is again an arbitrary element of V. The final conclusion follows from (12), (13) and (14) 
using the union bound and the triangle inequality. We start by establishing (12) and (13). 
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Lemma 3.5 Let e, S > 0, and let A, B,X,S C F 2 be such that for all x\, . . . ,xg €. X, 

P \pa^b{v) ~ £ Pa^b(v + xi + . . . + a^)] > 1 - 5. 

T/ien /or every rj > we have that 



yes 



E [PA^e(y + a?i + . . . + x e )] 

Xl,...,X£(zX 



>l-S/rj. 



Proof: From Markov's inequality it follows that for at least a (1 — <5/r/)-fraction of y G S, the 
relation 

Pa^b{v) ~ e pa^b(v + Xi + ... + Xe) 

holds for at least a (1— ^-fraction of ^-tuples (xi,...,xe) G X^. Thus for at least a (1 — 5/r/)-fraction 
of y 6 5, we have that 



[pa->b(2/ + xi + . . . + a^)] - pa^b(v) 



< E + xi + . . . + a^) - pA-^s(y)|] 

xi,...,Xf6A 



xi,...,x e ex 

which is seen to be bounded above by (1 — 77) ■ e + rj ■ 1 < e + rj. ■ 

The next lemma establishes (14). 

Lemma 3.6 Let X C F£, and let V = Spec^pT)- 1 . T/ien for all ye¥%andv£ V, 

E [PA-+B(y + Xl + ■ ■ ■ + x e )] &e" E + U + X1 + . . . , (15) 

xi,...,xt£X xi,...,X£(zX 



where e" = 2~ e y/\B\/\A\. 

Proof: We can write the difference between the two sides of (15) using the convolution operator 
as 

(Hx)* e * PA * 1b(v) ~ (Px)* £ *Pa*^b(v + v), 
which in terms of the Fourier basis equals 

E fi A (t) • dixit)? • Q(t) • - (-l)d^)-') . 

This expression in turn is bounded in absolute value by 

E • iAx(t)l £ - G(t) • |(-i)^| • |i - (-irl = E IAaWI • \px(t)f- G(t) • |i - (-1) 



By definition of F as the orthogonal complement of Spec 1/ / 2 (^) ) the right-hand side can be bounded 

as 

E • lAxWi' • |m*)| • |i - (-irl < 2- 1 e i/uwi • . 

By the Cauchy-Schwarz inequality and Parseval's indentity, this is bounded above by 



We are now ready for the proof of Corollary 3.4. 

Proof of Corollary 3.4: Let X be the set guaranteed by Corollary 3.3 for K = 1/a, and let 
V = Spec 1/2 (X) ± . 

First, note that Property 1 of Corollary 3.3 implies that \X\ > |A|/(2(l/a)* _1 ) > a 1 ■ 2 n_1 . It now 
follows from Chang's theorem (Theorem 2.2) that 

dim(Spec 1/2 (X)) = codim(V) < S ^j^r = 321og(2/a*). 
It remains to show that (11) holds. 

Let 5 := 8£(\A + B\/\S\) ■ exp (-2e 2 t). From Corollary 3.3 and Lemma 3.5 we have that 

PA->B(y) ~2e£+ V ^x u ...,x e eX [pA~^B(y + Xi + . . . + Xg)\ (16) 

for at least a (1 — c) /^-fraction of y G S, and similarly that for all v G V, 

PA^b{V + V) &2ee+ V ^x u ...,x e ex[PA^B(y + V + X\ + . . . + Xi)] (17) 

for at least a (1 — <5/r/)-fraction of y G S. Moreover, Lemma 3.6 implies that for every y G S and 
v G V, 

E Apa-+b(v + xi + ... + x e )] « £ /j^TTj E [/>A^B(y + f + xi + ... + x e )] ■ (18) 

xi,...,x e ex z y x 1 ,...,x l ex 

Applying the union bound and the triangle inequality to (16), (17) and (18), we conclude that 

PA^b{v) ~ £ ' PA^b(v + v) 

for e' = 4e£ + 2r/ + 2 _ ^y^B|7P4| for at least a (1 — 2(5/?7)-fraction of y G S, which is the desired 
conclusion. ■ 

4 An improved quadratic Goldreich-Levin theorem 

Both in number theory and theoretical computer science, there are certain situations where we 
may wish to decompose a bounded function / : F 2 — > C as a sum g + h, where g is a "uniform" or 
"random- looking" , and h is a somewhat "structured" part. Such situations include the counting of 
arithmetic progressions [Gre07], the analysis of Probabilistically Checkable Proofs (PCPs) [ST06] 
and the approximation of matrices and tensors [FK99]. 

In the case where one is looking for "linear uniformity" in the function g, for example when 
counting arithmetic progressions of length 3, such a decomposition is achieved by separating large 
and small Fourier coefficients (corresponding to "linearly structured" and "linearly uniform" parts, 
respectively). This task can be handled algorithmically by the Goldreich-Levin theorem ([GL89], 
see Theorem 4.1 below), which provides an algorithm that computes, with high probability, the 
large Fourier coefficients of / : Fr? — > {— 1, 1} in time polynomial in n. 

Theorem 4.1 (Goldreich-Levin Theorem) Let u,S > 0. There is a randomized algorithm 
which, given oracle access to a function f : F% — > { — 1,1}, runs in time 0(n 2 \ogn ■ 
poly(l/V, log (1/(5))) and outputs a decomposition 

k 

f = J2ci-(-l) {ai ' x) +9 
i=i 

with the following guarantee. 
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k = 0{l/v 2 ). 



3i \ci-f(ai)\ > v/2 



< S. 



Va such that |/(a)| > i/, 3i ai = a 



>l-5. 



However, these linear decompositions have been shown to not be sensitive enough to handle many 
other situations, such as the counting of arithmetic progressions of length 4. In the latter case, one 
instead needs the function g to be "quadratically uniform" in the sense of Gowers [Gow98]. We 
say that a function g is quadratically uniform if it is small in the U 3 norm, which is defined by the 
formula 

\\g\\u3 = RxMfoteeG II cMg{x + u ■ h), 

u;e{0,l}3 

where oj ■ h is shorthand for Y2i Wj/ij, and C^g = g if Y2i w « is even and g otherwise. 
A hint as to what might constitute the quadratically structured part of a decomposition in which g 
is quadratically uniform is given by the so-called inverse theorem for the U 3 norm, whose proof was 
largely contained in Gowers's proof of Szemeredi's theorem but brought to the point by Samorodnit- 
sky [Sam07] (in the case of characteristic 2) and by Green and Tao [GT08]. It states, qualitatively 
speaking, that a function with large U 3 norm correlates with a quadratic phase function, by which 
we mean a function of the form ( — l) q for a quadratic form q : F% — > ¥2. 

The inverse theorem implies that the structured part h has quadratic structure in the case where g 
is small in U 3 , and starting with [Gre07] a variety of such quadratic decomposition theorems have 
come into existence: in one formulation [GW12], one can write / as 

/ = J>(-l)* + <7 + Z, (19) 

i 

where the qi are quadratic forms, the \ are real coefficients such that |Aj| is bounded, ||<7||[/3 is 
small and I is a small l\ error (which is negligible in all known applications). Such a decomposition 
is not unique and non-trivial since the quadratic phases co q , unlike linear exponentials, do not form 
an orthonormal basis. In analogy with the decomposition into Fourier characters, it is natural to 
think of the coefficients Aj as the quadratic Fourier coefficients of /. 

An algorithmic version of a quadratic decomposition theorem was given by the last two authors 
in [TW11]. Prior to [TW11], all quadratic decomposition theorems proved had been of a rather 
abstract nature. In particular, work by Trevisan, Vadhan and the third author [TTV09] used 
linear programming techniques and boosting, while Gowers and the last author [GW12] gave a 
(non-constructive) existence proof using the Hahn-Banach theorem. The main result of [TW11] 
then was the following. 



Theorem 4.2 (Quadratic Goldreich-Levin theorem) Let e,S > 0, n 6 N and B > 1. 

Then there exists n = exp((l? /e) ) and a randomized algorithm running in time 0(n A log n ■ 
poly(l/?7, log(l/5))) which, given any function f : FJ> — > [—1, 1] as an oracle, outputs with probability 
at least 1 — 5 a decomposition into quadratic phases 

f = d(-l)9i + ... +Cfc (-l)9*+<7-H 

satisfying k < 1/rj 2 , \\g\\u3 < e, \\l\\i < 1/2B and |cj| < n for all i = 1, . . . , k. 
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The algorithm comprised two parts. The first was a (entirely deterministic) procedure for assem- 
bling the quadratic phases with which the function / correlates into an actual decomposition, if 
these quadratic phases can indeed be found. 

Theorem 4.3 Let Q be a class of functions as above and let e,5 > and B > 1. Let A be an 
algorithm which, given oracle access to a function f : X — > [—B,B] satisfying \\f\\ s > e, outputs, 
with probability at least 1 — 5, a function q £ Q such that (f,q) > rj for some n = rj(e,B). Then 
there exists an algorithm which, given any function f : X — > [—1,1], outputs with probability at 
least 1 — 5/rf a decomposition 

f = ci<?i + • • • + c k q k + g + l 

satisfying k < l/n 2 , \\g\\ s < e, \\l\\ 1 < 1/25 and \ci\ < n for all i = 1, . . . , k. 
The algorithm makes at most k calls to A. 

Theorem 4.3 is proved using a boosting argument, for which we refer the reader to [TW11]. The 
other key component in the quadratic Goldreich-Levin algorithm was the following self-correction 
procedure for Reed-Muller codes of order 2 (which are simply truth-tables of quadratic phase 
functions). 

Theorem 4.4 Given e,8 > 0, there exists n = exp(— l/e c ) and a randomized algorithm 
Find-Quadratic running in time 0(n A log n • poly(l/e, I/77, log (1/5))) which, given oracle access 
to a function f : FJJ — > { — 1, 1}, either outputs a quadratic form q(x) or !_. The algorithm satisfies 
the following guarantee. 

• If II /II 1/3 — e 7 then with probability at least 1 — 5 it finds a quadratic form q such that 

(f,(-m>v- 

• The probability that the algorithm outputs a quadratic form q with (/, (— l) q ) < rj/2 is at most 
S. 

This is essentially an algorithmic version of the U 3 inverse theorem. The proof of Theorem 4.4 
follows that of the inverse theorem very closely, except that many of the results from additive 
combinatorics that are used in the process need to be replaced by new "sampling versions" : since 
the subsets of F?? that appear in the proof are generally very dense, it is too expensive to even write 
them down (let alone perform operations on them) if one is aiming for an algorithm that runs in 
time polynomial in n. 

A crucial ingredient in the proof of Theorem 4.4 was an algorithmic version of the Bogolyubov- 
Ruzsa lemma (Lemma 5.3 in [TW11]), which reads as follows. 

Lemma 4.5 (Algorithmic Bogolyubov-Ruzsa Lemma) There exists a randomized algorithm 
Bogolyubov with parameters p and S which, given oracle access to a function h : FJ? — > {0, 1} with 
E/i > a, outputs a subspace V ^ FJJ - of codimension at most 0(q~ 3 ) (by giving a basis for V^) such 
that with probability at least 1 — 5, we have h * h * h* h(x) > p 4 /2 for all x G V. The algorithm 
runs in time n 2 log n ■ poly(l/a, log(l/<5)). 

In Section 4.2 we develop a replacement for this lemma (Theorem 4.8 below) with much better 
bounds. Inserting it into the framework of [TW11] reduces the dependence on e in the running 
time and the number of terms in the decomposition to quasipolynomial, allowing us to state the 
following result. 
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Theorem 4.6 (Quasipolynomial Quadratic Goldreich-Levin) Let e, 5 > 0, n G N and B > 

1. T/ien i/iere exists rj = exp(poly(5, log(l/e))) and a randomized algorithm running in time 
0(n 4 log n • poly(l/i7, log(l/5))) which, given any function f : Fg — > [—1,1] as an oracle, outputs 
with probability at least 1 — 5 a decomposition into quadratic phases 

f = Cl (-l)9i+... + Cfc (-l)«* + < 7 + i 

satisfying k < 1/rj 2 , \\g\\jj3 < e, Wl^ < 1/2B and |cj| < r\ for all i = 1, . . . , k. 

A further variant of Theorem 4.6 was proved in [TW11], in which the quadratic phases in the 
decomposition were replaced with slightly more complicated quadratic object, namely so-called 
quadratic averages, which were first introduced in [GW12] by Gowers and the last author. In this 
case the authors of [TW11] obtained a bound on the number of terms in the decomposition that was 
polynomial in e _1 in time exponential in e _1 , at the cost of the description size of each quadratic 
average being exponential in e -1 . Inserting the Quasipolynomial Algorithmic Bogolyubov-Ruzsa 
Lemma (Theorem 4.8) in the work of Section 5 in [TW11], we obtain an algorithm which finds a 
decomposition into polynomially many quadratic averages in time quasipolynomial in e -1 , where 
the description size of each average is now quasipolynomial in e -1 . We leave the details to the 
interested reader. 

4.1 The quasipolynomial Bogolyubov-Ruzsa lemma 

In the context of Fg, the traditional Bogolyubov-Ruzsa lemma states that if a set A has density 
at least a in its ambient group, then its fourfold sumset A + A + A + A contains a subspace of 
codimension at most 2a~ 2 . It is easily proved using a few lines of Fourier analysis: the orthogonal 
complement of the subspace is given by the frequencies at which the indicator function of A has 
relatively large Fourier coefficients. 

The bound on the codimension of V was improved to 0(log 4 (a~ 1 )) by Sanders [SanlO]. This 
improvement has far-reaching quantitative implications for other problems, in particular the bound 
in Roth's theorem [Sanllb] and the f/ 3 inverse theorem. We now deduce the quasipolynomial 
Bogloyubov-Ruzsa lemma from Corollary 3.4. In Section 4.2 we give an algorithmic version of the 
proof, which allows us to explicitly find a basis for V- 1 . 

Theorem 4.7 (Quasipolynomial Bogloyubov-Ruzsa Lemma) Let A C F?,' be a subset of 
density a. Then there exists a subspace V of ¥2 satisfying V C AA and 

codim(V) = 0(log 4 (a -1 )). 

Proof of Theorem 4.7: Applying Corollary 3.4 with B = 2A, S = A, £ = log(30 2 /")/2, 
rj = 1/60, e = 1/(120^) and t to be determined later on, we conclude the existence of a subspace V 
of codim(F) < 321og(2/a*) which has the property that for all v G V, 

i \3A\ 

¥ [p A ^2A(a) «v PA^2A{a + v)] > 1 - 16- • exp {-2eH) , 
where e' = Aei + 2n + 2~ e y/\2A\/\A\ < 1/30 + 1/30 + (y^/30) • yA~/cl < 1/10. 
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Since pa-+2a{o) = 1 for all a G A, this implies that 
IP [pA^2A(a + v) > 0.9] = 

aeA 

> 
> 



Choosing t = 0(log 3 (l/a)) we find that V has the desired codimension 0(log 4 (l/a)) and satisfies 

P [p A ^2A(a + v)> 0.9] > 0.9 

aeA 

for all v G V. Recalling the definition of pa^b in (2), this inequality implies that for all v G V, 

P [a + a' + v G 2A] > 0.9 2 = 0.81. 

By averaging, there therefore exists a pair a, a' £ A such that P ue y[a + a' + v G 2A] > 0.81, or 
equivalently \V n (a + a' + 2^4) |> 0.81|V|. But it is easy to see that if \Vr\B\ > i|V| for some 
subset B C Fj, then V C 2B (since every element v £ V has precisely \ V\ different representations 
as v = v i + V2 where v\,V2 G V). We conclude that V C 2 (a + a' + A + A) C 4A, which finishes 
the proof. ■ 



a IP 4 [PA^2A(a) ~i/io PA^2A(a + «)] 

£ I3AI , o \ 
1 - 16-Vrr • exp (-2e 2 t) 
7] \A\ v ' 

1 - 16-cT 1 • exp (-2e 2 t) 
1 -480^M.expf- 



a V 1800- log 2 (30 2 /a) 



4.2 The quasipolynomial Bogolyubov-Ruzsa lemma — algorithmic version 

Here we develop an algorithmic version of the quasipolynomial Bogolyubov-Ruzsa lemma. In 
other words, we give an efficient (probabilistic) algorithm for finding a basis for the orthogonal 
complement of the subspace V in Theorem 4.7. 

Theorem 4.8 (Algorithmic Quasipolynomial Bogolyubov-Ruzsa Lemma) There exists a 
randomized algorithm Quasipolynomial-Bogolyubov with parameters a and^f' which, given oracle 
access to a function h : FJJ — >■ {0, 1} with E/i > a, outputs a subspace V ^ F?? of codimension at 
most 0(log 4 (l/ct)) (by giving a basis for ~V L ) such that with probability at least 1 — 7', we have 
h*h*h*h(x) > for each x G V . The algorithm runs in time 2° '( log ( 1 / a )) • polylog^/V) • n 3 logn. 

Note that if the function h equals the indicator function of a subset i C Fj, then the condition 
h*h*h*h(x) > implies that x G <iA, and if this condition is satisfied for all x G V, then V C 4A. 
However, while it will be convenient to think of the set A = {x G | h(x) = 1} in the proof, we 
will actually apply the theorem to the output of a randomized algorithm, for which the statement 
in terms of a function makes more sense. We also assume for convenience that Eh is exactly a. 
The proof remains unchanged when the density is larger than a. 

In the combinatorial proof we considered the measure pa^2a{v) = PaeA [v + a £ 2 A], and the 
subspace V was defined in terms of a set X which was described using this measure. However, 
now this measure is difficult to compute since it might not be possible to test membership simply 
using oracle access to h, which is the indicating function for A. We give a robust version of the 
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combinatorial proof by noting that y + a G 2A is equivalent to saying that h * h(a + y) > 0. But 
since we do not have noise-free access to h * h, we cannot test this function directly. Instead, we 
test if h * h(a + y) > rja 2 for some 77 > 0. For this purpose, we define the set 

Z n ■= {x G F£ I h*h[x) > r/-a 2 } . 

The following procedure tests membership in Z v by estimating h * h using few samples. 



Z-Test (x) 



Estimate the expectation h*h(x) = K ye fnh(y) • h(x — y) using r samples of elements 
y G F™. 

Answer 1 if the estimate is at least na 2 and otherwise. 



However, since we are estimating the value of h * h, we only have the following kind of guarantee. 

Claim 4.9 Given 71 > 0, the output of Z-Test(x) withr = 0(l/(ry 2 a 4 )dog(l/7i)) queries satisfies 
the following guarantee with probability at least 1 — 71. 

• Z-Test(x) = 1 x G Zj)/2 ■ 

• Z-Test(x) = =>■ x $l Z Sr) /2- 

Proof: This follows immediately from the Hoeffding bound (Lemma 2.1). ■ 
Let Z(x) denote the (random) function given by the output of Z-Test(x). Then the measure 

p(y) := E [Z(y + a)] = --h*Z(y). 

a£A a 

can be efficiently estimated by sampling. 

Next we need a procedure to test for membership in the set X which satisfies the iterated almost- 
periodicity condition in Corollary 3.3. 

Lemma 4.10 Let 77 G (0,1/3600), 72 > and let h and A be defined as above. Then for any 
integers t, t = 0(l 2 (\ogi + log(l/a))) there exists a randomized procedure X-Test with outputs in 
{0, 1} which runs in time (l/a)°W and has the following properties. 

• With probability 1 - 72, P xe¥ « [X-Test(x) = 1] > a 2t /A. 

• For all x±, . . . , X£ G F?;, we have with probability at least 1 — 72, 

9 

Mi G [£] X-Test (a;,) = 1 => E [Z(a + a + xi + . . . + x e )] > — . 

a,a'eA 10 

Proof: As in the proof of Proposition 3.2, define G[e, S\ to be the set of sequences a G (F^)* 
which can be used to estimate p well (for our new definition of p). For a G A f , define 



1 * 

p a (y) ■= - ■ S ^Z{a i + y) , 



=1 



G[e,S\ := aei'l P [| p(y) - p a (y) \>e}<8 
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Also, as above, we will need to test membership in G[e, 6]. This we will only be able to do 
approximately, using the following randomized procedure. 



G-Test (a = (ai, . . . , at)) 

- Check if h(a\) = . . . = h(at) = 1. If not output 0. 

- Pick r independent samples j/i, . . . , y r € FJf . 

- For each j/j, estimate p{yi) using r' independent samples. Also compute p a (Ui) for 



- If \{yi | \p{yi) — p a {Vi)\ > e}| > Sr then output 0, else output 1. 
We prove the following guarantee for the above test. 

Claim 4.11 Given 73 > 0, the output of G-Test(a) with r = 0(l/5 2 ■ log(l/73)) and r' = 
0(l/s 2 • log(r/73)) queries, satisfies the following guarantee with probability at least 1 — 73. 

• G-Test(a) = 1 G[2e, 25}. 

• G-Test(a) = =► a g G[e/2, 5/2}. 

Proof: Again, this is a direct consequence of the Hoeffding bound (Lemma 2.1). ■ 

Note that the definition of the procedure G-Test actually depends on the parameters e, 5 and the 
error parameter 73, for choosing the appropriate values of r and r'. However, we choose to hide 
this dependence for the sake of readability. 

From now on let G(a) denote the output of G-Test on the input a. We will now find an element 
a € (F^)' such that G(a) = 1 and G(a + x) = 1 for a large number of elements x € F£ . This can 
be done efficiently with high probability it 5 = exp(— 0(e 2 t)). 

Claim 4.12 Given 74 > 0, there exists an algorithm which makes 0((l/a 6 *) • log 2 (l/74)) calls 
to G-Test and finds an a. £ (F^)* such that with probability 1 — 74, we have G(a) = 1 and 



E xeF n [G{k + x)]>a 2t /A. 

Proof: The Hoeffding bound gives that |G[e/2,<5/2]| > 0.99 \A l \ for t > (c/e 2 ) ■ log(l/<5). Since 
A has density a in we have for 73 < 0.04 that E ae(F n )t [G(a)] > (1 - 73) • (0.99a*) > 0.95a*. 



each yi. 



Using convexity gives 



E 

aG(F5)*,xeF™ 



[G(a)-G(a + s)] = 



E 



[G(a + x) • G(a + x' 



)] 




> (0.95 -a*) 2 > 0.9 -a 



2f 



Hence, by Markov's inequality 



G(a) • E [G(a + x)} > a 2t 12 > a 2t /A . 
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The algorithm then simply tries random sequences a until it finds one for which G(a) = 1. For 
such an a, it estimates E^p™ [G(a + ar)] using 0((l/a ) • log(l/74)) samples. With probabilbity 
1 — 74/2, the estimate is accurate to within an additive a 2t /8. The algorithm stops and outputs an 
a for which G(a) = 1 and the estimate computed by the algorithm is at least 3a 2 */4. By the above, 
it finds such an a with probability at least 1 — 74/2 in at most 0((l/a 2t ) ■ log(l/74)) attempts. If 
not, it simply outputs a random a. ■ 

Given a as above, we define X to be the set 

X := {x £ F£ I G(& + x) = 1} . 

Note that G(a) = 1 and \X\ > (a 2 */4) • 2™ with probability 1 — 74. Also, membership in X can be 
tested efficiently. We simply define the procedure X-Test as 

X-Test(x) = G-Test(a + x) . 

We now prove that this X suffices for our purposes. We will prove using induction that for xi,...,X£ 
satisfying X-Test(xj) = 1 Vz € [£], we have with probability 1 — 73 that 

E \Z(a + a' + xi + ... + x e )] = E [p(a + x x + . . . + x t )\ >9/10. 

a,a'eA aeA 

By Claims 4.11 and 4.12 we have that a,a + xi, ....... ,a + X£ G G[2e,25] with probability at least 

1 — {£ + 1)73 — 74. We will prove that whenever a, x±, . . . ,x# satisfy this condition, then for all 
r G {0, ...,£} we have 



p(a + x\ + . . . + x r ) > 1 — \fr\ + 71 /a 2 — Are > 1 — \A? + 111 ' 2 ~ A5r/a , 

aeA L ' J 

where 71 is the error parameter in Claim 4.9. The following claim proves the base case r = 0. 



Claim 4.13 F aeA [p(a) > 1 - ^r? + ( 7 i/a 2 )J > 1 - 07 + (7i/« 2 ). 

Proof: We have 

E [p(a)] = E \Z(a + a')} = \-(h*h,Z) 

a£A a,a'eA Or 



= \ ■ (h * h, 1) - \ ■ (h * h, (1 - Z)) 

= l-\-(h*h,{l-Z)) 

Since with probability at least 1 — 71, h*h is at most 77a 2 when 1 — Z = 1, the inner product in the 
second term is at most r/a 2 + 71. This gives E qG a [p(o)] > 1 — ?? — (71/a 2 ). An averaging argument 
then proves the claim. ■ 



For readability, let j3 denote the quantity + (71/a 2 ). We assume by induction that for x±, . . . , x r 
P [p(a + x 1 + ... + x r )>l-p- 4re] > 1 - j3 - 4r5/a . 

aeA 

Define the set 

A r = {y = a + x\ + . . . + x r I a G A, p(y) > 1 — ft — Are} . 
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By the above, the density of A r is at least a r = a • (1 — f3 — 4rS/a). For any x r+ \ G X, we have 
that for at least a (1 — 4J/a r )-fraction of elements y G A r , 

\p(y)-Pk(y)\ <e an d \p(v + x r+i) ~ pk+x r+1 (y + x r +i)\ = \p{y + x r+1 ) - p k (y)\ <e. 

Thus, by the triangle inequality 

P [p(a + x 1 + ... + x r+1 )>l- P-4(r + l)£] > (1 - 4S/a r ) ■ (a r /a) = 1 - p - 4(r + 1)8/ a . 

To get the required bounds we choose 71 = 77a 2 , 73 = 72/(2^ + 1)) and 74 = 72/2. Also, we take 
e = 1/(12M), <5 = a/(12M) and r? = 10~ 4 . 

The basic procedure used for the above algorithm is Z-Test, for which the running time is dominated 
by 0((l/a 4 ) log(l/a)) oracle queries to the function h. Assuming the query can be answered in 
constant time and it takes 0(n) time to write down the input, the running time for Z-Test is 
0((l/a 4 ) log(l/a) • n). Also, for the above choice of parameters, the procedure G-Test makes 
0((£ 4 /a 2 ) • log(^/a) • log 3 (£/72)) calls to Z-Test. Finally, the procedure in Claim 4.12 makes 
0((l/a 6 *) • log 2 (7 2 )) calls to G-Test. Taking t to be 0((l/e 2 ) log(l/<5)) = 0{£ 2 ■ \og(£/a)), this 
gives a running time of (l/a)°^ ( lo s i + lo s( 1 / a ))) . log 5 (l/7 2 ) • n for the algorithm. ■ 

We can now prove following algorithmic analogue of Theorem 4.7. 

Proof of Theorem 4.8: Choose t = log(10/a). Let X be the set defined in Lemma 4.10. Define 
the subspace Vq as 

V := 

where lx is the indicator function of X. To find (an approximation to) Vo, we first estimate 
tx(0) = E[l x ] = IP^eFj [X-Test(x) = 1] using n((l/a 4t ) ■ log(l/y)) samples so that with proba- 
bility 1 — y/4, the error is at most a 2t /8. By Lemma 4.10, with probability 1 — 72, the quantity 
P xeF n [X-Test(x) = 1] is at least q 2 */4. Taking 72 = V/4, we get that with probability 1 - j'/2, 
the estimate is at least 3a 2t /8. Call this estimate (Iq. 

We now need a procedure which determines the large Fourier coefficients of lx with reasonable 
accuracy. This procedure is given by the Goldreich-Levin theorem (Theorem 4.1). 

We run Theorem 4.1 with error parameter S = j'/2 and an oracle access to the procedure X-Test, 
to find all characters with Fourier coefficients larger than p,o/8 in absolute value, up to an additive 
accuracy of v = po/16. Let K be the list of characters given by the algorithm. We take 

V = {C G F£ I C € K} ± . 

Now with probability at least 1 — 7', the trivial coefficient t x (0) is at least a 2t /4, K contains 
all C such that \\x{C,)\ > iQ(0)/2 and \tx{()\ > £x(0)/32 for all C G K. By Chang's theorem 
(Theorem 2.2) and our choice of parameters, the codimension of V is then at most 0(log(l/a 2 *)) = 
0(log 4 (l/a)). It remains to show that h* h* h* h(x) > for all x G V. 

Let g = tz v * Pa * Px * ... * px, where p x is convolved i times. By definition of X, we have that 

(g,p A ) > 9/10. 



lx(C) >tx(0)/2\ = (Spec 1/2 (A)) 



_L 
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Also, by definition of V, we have 



\(g,HA)-(g*Hv,HA)\ < lz„(7) Ia*a(7)I 2 Ima-(7)|' < 



1 



10 



Hence, (g * fiy, (J-a) > 4/5. Expanding this, we get 



E aeA E veV E a , eA E [l Z|i (a + a' + v + xi + . . . + x t )] > 4/5 . 



xi,...,x e ex 



Thus, there exists an xo G F?? such that E„ey + £0)] = E^gy [H-z^+zoC^)] — 4/5. In other 

words, there exists x G F£ such that \V D (x + Z v )\ > 4|V|/5 > \V\/2. Since any v G V has |F| 
representations as v = V1+V2 with v±,V2 G V, we find that for any v G V, there exist fi, t>2 G XQ + Z rj 
such that v = v\ + 1)2, and hence v G 2Z^. 

The running time is dominated by the 0(n 2 log n • poly((l/a) t , log(l/7'))) calls made by the 
Goldreich-Levin algorithm to the procedure X-Test. For t = 0(£ 2 \og(£/a)) and £ = log(10/a), 
this implies a running time of 2°( log • polylog(l/7') • n 3 logn. ■ 

5 Sumsets of dense sets contain large subspaces 

Inspired by the question of whether dense subsets of {1, ... , N} contain long arithmetic progressions, 
which has received extensive coverage in the literature [Bou90, Gre02, San08], Ben Green asked an 
analogous question in the finite field setting and obtained the following result [Gre05b]. 

Theorem 5.1 (Green's theorem on subspaces in sumsets) Let A C F?? be a subset of den- 
sity a. Then A + A contains a subspace V ofFV; of dimension 



In [Sanlla] Sanders showed, using a Fourier-based density- increment strategy, that one can in fact 
take the subspace V to have dimension dim(V) = $7(cm). He remarks that a bound of similar 
strength could be obtained via a finite field analogue of the methods of Croot, Laba and Sisask 
[CLS11]. Our main theorem in this section is the following, replicating the result from [CLS11], 
which falls slightly short of Sanders's bound [Sanlla]. 

Theorem 5.2 (Sumsets of dense sets contain large subspaces) Let A C F?? be a subset of 
density a. Then A + A contains an affine subspace V ofFV; of dimension 



For the proof of the above theorem we shall need a refined version of the almost-periodicity results 
from Section 3. In particular, we shall need the following refined version of Corollary 3.4. 

Corollary 5.3 (Refined almost-periodicity of sumsets over a subspace) Let A C F?? be a 

subset of density a. Then for every integer t and set B C F?>, there exists a subspace V of codi- 
mension codim(V r ) < 321og(2/a') with the following property. 



dim(V) = n(a 2 n). 
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For every v G V, for all subsets S C F2 and /or every 77, e > anc? integer £, 

P - Pa-*b(j/ + «) < e'] > 1 - 16-^^ • exp {-e 2 t /A) , (20) 

yes rj \o\ 

where e' = Aet^J p A ^ B {y) + 2n + 2-y|5|/|A|. 



The main difference between the above corollary and Corollary 3.4 lies in the term \J pa^b{u) 
which appears in the expression for e' in the above corollary. This term makes e' smaller which in 
turn makes the above corollary stronger. For the sake of simplicity, we only consider in the above 
corollary one-sided bounds of the form pa^b(u) — PA-^b{v + v) < e' instead of two-sided bounds 
of the form pa^b(u) ~e' PA~>b(u + v). This will suffice for the proof of Theorem 5.2. 

The proof of Corollary 5.3 is similar to the proof of Corollary 3.4, and the main difference is that 
in the proof of Corollary 5.3 we perform a more detailed analysis of the distribution l B {a + y) 
when a is distributed uniformly over A and y is a fixed point in FJJ - and use information on the 
variance of this distribution. More specifically, in the proof Corollary 5.3, instead of using the 
regular Hoeffding bound for sampling (Lemma 2.1), we use the following well-known refinement 
involving the variance [TV06]. 

Lemma 5.4 (Refined Hoeffding bound for sampling) If X is a random variable satisfying 
|X — E [X] I < 1 and p is the empirical average obtained from t samples, then 

P[|E[X]-A| > 7] < 2exp(- i -J^) 

provided that 7 < 2a 2 . 



Since the proof of Corollary 5.3 presents some technical complications, we include it in full in 
Appendix A. The rest of this section is devoted to the proof of Theorem 5.2 assuming that 
Corollary 5.3 is true. 

The idea of the proof of Theorem 5.2 is as follows. Applying Corollary 5.3 with B = A implies the 
existence of a relatively large subspace V such that for every v G V, for a large fraction of y G F?>, 
it holds that pa^a(u + v) > 0. Our goal will be to show that an affine shift of V is contained in 
2A, or equivalently to show the existence of an affine shift y G F?> such that pa^a(v + v) > for all 
v G V. Suppose that we have chosen the parameters in Corollary 5.3 in such a way that for every 
v £ V, at least (1 — o")-fraction of y G F2 satisfy that pa^a(u + v) > 0. Then the union bound 
implies that at least a (1 — |F|o")-fraction of y G F2 satisfy the condition pa^a(u + v) > for all 
v £ V. Thus in order to guarantee the existence of the desired affine shift y, it suffices to choose 
the parameters in Corollary 5.3 in such a way that \V\S < 1. 

Note that we wouldn't have gained anything from considering the variance in the proof of the 
quasipolynomial Bogolyubov-Ruzsa lemma (Theorem 4.7) since there Corollary 3.4 is applied to 
elements y for which pa^b(u) is very large (between 0.9 and 1), and we have no better handle 
on the variance. In contrast, here the typical element to which we apply Corollary 5.3 satisfies 
PA^a(h) = ct, so that the variance is small as well. 

For the proof of Theorem 5.2 we shall need the following simple lemma. 

Lemma 5.5 Let f(t) = t 2 — bt — c for b > 0, c > 0, and suppose that < t' < t" are such that 
f(t>) >0. Then f(t')<f{t"). 
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Proof: The fact that b > 0, c > implies that f{t) has a root t\ < and another root £2 > 0. 
Thus we have that f(t) is negative in the interval (0, £2) and is positive in the interval (£2, 00). The 
fact that t' > and /(£') > thus implies that t' > £2- The lemma follows by noting that / is 
monotonically increasing in the interval (£2,00). ■ 

Proof of Theorem 5.2: Apply Corollary 5.3 with B = A, rj = a/24, i = log(12/a), e = 
\/2a/(48£), t to be determined later on and 



S = {y£ ¥2 I pa-+a(v) > «/2}. 



Noting that 



E,, eF n [p A _, A (y)} = p [a + y G A] = E aGA 
2 ye¥^,aeA 



[a + y£A] 



a, 



Markov's inequality implies that \S\ > (a/2) -2™. 

With this choice of parameters Corollary 5.3 implies that for every v £ V, 



yes 



PA^A{y + v)> p A ->A{y) - a/6 



A/2a • pa^a{v) 



12 



> 1 - 16 



I \2A\ 



exp(-e 2 t/4) 



Let 5 := 16(£/r)) ■ (\2A\/\S\) ■ exp(-e 2 t/4). Since pa-+a(v) > a/2 for every y G S, the inequality 
above implies that 



yes 



[pA^A(y + v) > a/4] 



yes 



Pa^a(v + v) > a/2 - a/6 



^J2a ■ a/2 



Pa~>a(v + v)> pa^a(v) - a/6 - 



12 

y/2a ■ pa^a{v) 
12 



> P 
yeS 

> 1-5 

where the first inequality follows by applying Lemma 5.5 with f(t) = t 2 — {\[2a/\2^t — a/6, 
t' = y/ a/2, t" = \J pa->a(v), and noting that our assumptions imply that < t' < t" and that 
f(t>) = a/4 > 0. 

A union bound then implies that 



yes 



[pA^A(y + v) > a/4 Vf G V] > 1 - \V\ ■ 5. 



To conclude the proof we shall show that for sufficiently small integer t one can guarantee that 
\V\S < 1. This in turn will imply the existence of an affine shift y £ S such that pa-^a{u + v) > 
for every v G V, and consequently y + V <Z 2A. Our choice of parameters implies that 



\v\s 



2a 



< exp -t 321og(l/a) + 



+ 2 log(l/a) + n + log log(12/a 



4-48 2 -log 2 (12/a) 
Thus, \V\8 < 1 is guaranteed by letting 

^ 21og(l/a) +n + loglog(12/a) n + 0(log(l/a)) 



321og(l/a) + 



2a 

4-48 2 -log 2 (12/a) 



321og(l/a) + ft(a/log 2 (l/a)) 
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But for such a choice of t we have that 

dim(V) = n-321og(l/a)t-32 = fi( 



a 

-n 



Vlog d (l/a) 
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A Appendix: Proof of Corollary 5.3 



In order to prove Corollary 5.3, we start with refined versions of Proposition 3.2 and Corollary 3.3, 
given as Proposition A.l and Corollary A. 2 below. 

Proposition A.l (Refined version of almost-periodicity of sumsets) Let A C be a sub- 
set satisfying \2A\ < K\A\. Then for every integer t and set B C¥^ there exists a set X with the 
following properties. 

1. The set X is contained in an affine shift of A. 

2. The size of X is at least \A\/{2K t - 1 ). 

3. For all x £ X and for all subsets S C F£ ; 



\A + B\ 



Pa^b(v) ~ PA^b(v + x)< 2e^p A ^B(y)\ > 1 - 8 1 • exp {-eH/A) . (21) 



Proof: The proof is very similar to the proof of Proposition 3.2 and we only point out the 
differences here. As in Proposition 3.2, let p(y) := pa^b(u) and for a vector a = (ai, . . . ,a t ) G A 1 
let 

~ / \ \{y + Oi€B\i = l,...,t}\ 

p*(v) = 1 • 

For the purpose of this proof, we say that a is an e-good estimator for y if p{y) ps £ / p a (y) for 
£ ' = e \J P(y) (this is the main point in which this proof differs from the proof of Proposition 3.2). 
Fix y G ¥% , and let Y{ be the indicator random variable for the event "y + dj G B" where aj is 
chosen uniformly at random from A. Then p a (y) = \ Y2l=i ^ s the average of t i.i.d. indicator 
random variables each having mean p(y) and variance p(y)(l — p(y)) < p(y), so the refined Chernoff- 
Hoeffding bound (Lemma 5.4) implies that for all y G IF?,, 



aeA f 



p(y) p*ti)] ^ 2 ex p H 2 V 4 ) • ( 22 ) 



Set 5 := 2 exp (— e 2 t/4j. Similarly to the proof of Proposition 3.2, by an averaging argument we 
get that at least half of the sequences a. £ A 1 are e-good estimators for all but (2<5)-fraction of 
y G A + B, in which case we say that a is (e, 25)-good estimator for p. From here we continue as 
in the proof of Proposition 3.2, letting G[e, 25] be the set of (e, 2<5)-good estimators, that is 

G[e, 25} = {a G A* | ^P +fl [ P (y) « ^ p a (y)] > 1 - 2«} , 

and defining G[e,25]b, a and X accordingly. 

It can be easily verified that the first two properties listed in the statement are satisfied. Next we 
show that the third one is satisfied as well. 

Suppose x = ai + ai, where a\ is the first element of an (e, 2<5)-good estimator a = (a±, . . . , a<) G 
G[e, 2<5]b- Recalling that a is an (e, 25)-good estimator, we know that for all but a (2<5|^4 + f?|/|S|)- 
fraction of y G S, 

p{y) % /^y fciv)- (23) 
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Similarly, we have that 

p(y + x ) ~e^(^) My + x ) ( 24 ) 

for all but a (25| ^4 + B\/\x + S'D-fraction of y G S. Using a union bound and the fact that |S + a:| = 
for all but a (46\A + i?|/|S |)-fr a ction of y G S both (23) and (24) hold. For such y we conclude 
p(y) ~e' P(y + x ) f° r £> = e \J P(y) + e \/ + x ) using the triangle inequality and the fact that 
Pa(y) = Pa+x(y + x) = p a (y + x). The proof is completed by noting that p(y) - p(y + x) < 2e^J p(y) 
holds trivially if p(y+x) > p(y), and hence without loss of generality we may assume that p(y+x) < 
p(y). This implies in turn that e' < 2e\J p(y). 



As before, by an inductive application of Proposition A.l one can prove the following iterated 
version. 

Corollary A. 2 (Refined almost-periodicity of sumsets, iterated) If A C F2 satisfies 
\2A\ < K\A\ then for every integer t and set B C there exists a set X with the following 
properties. 



1. The set X is contained in an affine shift of A. 

2. The size of X is at least \A\/(2K t ~ 1 ). 

3. For all x±, . . . , xg G X and for all subsets S C , 



y&S 



a _|_ _g| 

PA^B(y) - Pa^b{v + xi + ...+x e ) < 2e£yJ pA^B(y) > 1 - 8£ — ^ exp (-e 2 t/4) . 

(25) 



Proof of Corollary A. 2: Proposition A.l establishes the case £ = 1. For the induction step, 
suppose that the lemma holds for some integer £ > 1 with a set X, and we shall prove that the 
lemma holds for £ + 1 with the same set X. 

Let 5 := 8(\A + • exp (— e 2 i/4), and fix x\, . . . ,xe + \ G X. By the induction hypothesis, for 

at least (1 — M)-fraction of y G S it holds that 



PA^B{y) - Pa^b{v + xi + . . . + xe) < 2e£y / p A ^B(y)- (26) 
The £ = 1 case implies that for at least (1 — <5)-fraction of y G S it holds that 

PA^B{y + xi + . . . + x e ) - pA->B{y + xi + ... + x e+ i) < 2e^J pA-^sh) + xi + ... + xe). (27) 

Thus by union bound we have that at least (1 — (£ + l)(5)-fraction of y G S satisfy both (26) and 
(27). This implies in turn that for at least (1 — (£ + l)5)-fraction of y G S it holds that 

PA^B{y) - pA^B{y + xi + ... + x e+1 ) < 2e£^J ' p A ^B{y) + 2e^J p A ^ B {y + x[ + ■■■ +~x~ej- (28) 

If pA->B{y + x\ + . . . + Xi) < pA->B(y), Equation (28) implies that 

PA^B{y) ~ PA->B{y + xi + ... + xe+i) < 2e(£ + l)^f p A ^ B (y) 
and hence we are done. 
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Otherwise assume that pa->b(v + x\ + . . . + xe) > pa^b(u)- Without loss of generality we may also 
assume that pA^B{y) — 2£y/ Pa^b{v) > since otherwise the fact that pa^,b{v+x\ + ■ ■ .+xe+i) > 
implies that 

Pa^b{v + xi + . . . + x e +i) > Pa^b{v) - 2eV ' pa~^b{v) 

> pa^b(v) - 2e(£ + 1) ^p A ^ B {y) 

and hence we are done. 
Equation (27) then implies that 

Pa^b(v + xi + . . . + x e+ i) > pa^b(v + xi + ... + xe)- 2e^ pa~>b(v + x~i + • • • + x t ) 

> PA->b{v) - 2eV PA->B{y) 

> Pa^b(v) - 2e(£ + l)v / PA^s(y), 

where the second inequality follows from Lemma 5.5 by letting f(t) = t 2 — 2et, t' = pa-^b(v), 
t" = pa->b(u + x~\ + . . . + Xi) and noting that our assumptions imply that < t! < t" and 
f(t') > 0. ■ 

One final ingredient needed for the proof of Corollary 5.3 is the following refined version of Lemma 
3.5. 

Lemma A. 3 Let S > 0, and let e : (F^)^ 1 — > [0, 1] be an arbitrary function in £+1 variables. Let 
A, B,X,S C F2 be such that for all x±, . . . ,X£ €. X , 

P \pA->B(y) - pa->b{v + xi + . . . + x e ) < s(y, x 1 ,..., x e )] >1-S. 

yeS 

Then for every rj > we have 

P [pa^b(v) -^x u ...,x e ex[pA^B{y + xi + . . . + x e )] < E Xl XeeX [£{y,xi, . . . ,x e )] +v]> 1 - V 7 /- 
yes 

Similarly, if for all x±,... ,xg G X, 

P [pa^b{v + xi + . . . + x e ) - pa^b{v) < e{y, x±,..., x e )] >1-S, 
yes 

then for every r\ > we have 

P [E xl ,..., Xee x[pA^B(y + xi + ... + xe)] - pA^B{y) < E X1 x eX [e{y,x u . . . ,x e )] + rj] > 1 - 5/rj. 

yes 

Proof: We shall prove only the first part of the lemma, the second part being almost identical. 
It follows from Markov's inequality that for at least a (1 — 5/?7)-fraction of y G S, we have 

PA^B{y) - PA->B(y + xi + . . . + xe) < e(y, xi,...,xg) 

for at least a (1 — ^-fraction of ^-tuples (x\, . . . , xe) £ X . Taking expectations, we find that for 
at least a (1 — <5/?7)-fraction of y G S, 

Pa-+b(v) ~ ®xi,...,x t ex [PA^B(y + xi + . . . + xe)] < E xu ,„ !XeeX [e(y + x\ + . . . + xe)] + rj. 
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We are now ready for the proof of Corollary 5.3. 

Proof of Corollary 5.3: Again, let V = Spec 1 / 2 (^)" L - As before, Chang's theorem (Theorem 
2.2) implies that codim(V) < 32 log(2/a*). 

Let 5 := 8£(\A + B\/\S\) ■ exp (-e 2 t/4). From Lemma A. 2 and Lemma A. 3 we have that 

PA^b{v) ~ ®xi,...,xtex[pA^-B(y + X! + ... + xg)] < 2ei^J pa^b (y) + rj (29) 
for at least (1 — c) /^-fraction of y G S, and similarly that for all v G V, 

^x 1 ,...,x e ex[pA^B{y + v + xi + . . . + x e )] - pa^b(v + v) 

< 2e£ ■ E Xlj ... jX<6 x [a/ pa^b(v + v + xt + ... + xg)] + 77 

< 2e^Y / ' 1E a ; i,...,^ex[pA^B(y + v + Xi + ... + xg)] + V (30) 

for at least (1 — c) /^-fraction of y G S 1 , where the last inequality is due to convexity. 
From Lemma 3.6 we have that for every y G S and t> G V it holds that 

\pA-+B(y + x 1 + ... + x t )]-'Ex 1 ,...0tex\PA-+B(v + v + x 1 + ... + x t )] < 2 Vl^l/I^l- ( 31 ) 

If ^x 1 ,...,x 1 £x[pa^b{v + v + xi + ... + xe)] < pa^b{v) then applying the union bound to (29), (30) 
and (31) we conclude that 

Pa^b{v) ~ PA^b(v + v) 

< 2e£y / PA ^B(y) + 2£l^E Xu ... <XeeX [pA->B(y + v + Xl + ... + x e )] + 2r,+ 2- f '^\B\/\A\ 

< Ast^p~ A ~^ + 2T 1 + 2- l ^\B\J\A\ 

for at least (1 — 2<5/r/)-fraction of y G S, thus arriving at the desired conclusion. 

Otherwise, assume that ^ Xl ,...,x e ex[pA->B{y + v + x\ + . . . + xg)] > pa^b{v)- Without loss of 
generality we may also assume that pa^b(v) — 2ei^J pA^B{y) — V > since otherwise we have that 

PA^B(y + v) > PA->B(y) - 2el\J pa^b{v) ~V> Pa^b(v) - e' 
and hence we are done. Inequality (30) then implies that pa^b(v + v) is at least 

^x u ..., Xl ex\pA-+B{y + v + xi + ... + xe)] - 2e£^E xu ,„ iXe( zx[pA^B(y + v + ~x\ + . . . + xg)] - ij 

> PA->B(y) - 2e£^ p A ^B(y) - v 

> PA^B{y)~e' 

where the first inequality follows from Lemma 5.5 by letting f(t) = t 2 — 2e£t — rj, t' = y 7 pa~>b(v), 
t" = y / lE :rii ... iXj , e x[p J 4-i>B(y + v + x\ + . . . + xg)] and noting that our assumptions imply that < 
t' < t" and 7(0 > 0. ■ 
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